HN user

dengnan

712 karma
Posts14
Comments76
View on HN

Let's play with statistics:

Scenario 1: 100 human drivers drive some distance. 2 bad drivers caused 150 accidents and both died in their last fatal accidents.

Scenario 2: 100 self-driving/autopilot-enabled cars drive the same road for the same distance. Everyone has one accident and one of them is fatal.

Statistical numbers: Self-driving/autopilot-enabled cars cut both the accident rate and death rate by half. Death rate per accident is reduced from 2/150 to 1/100.

Conclusion: self-driving/autopilot is better.

I am a Chinese and I am curious starting when we had net neutrality? Every major sites has to pay all major ISPs to connect into their network so that all ISPs' customers can access the site. When you rent a server, you need to make sure that the server is connected to at least two of the major networks otherwise ISPs will throttle traffic from other competitors. It is also true that connecting servers outside the country is terribly slow if it even accessible

I think they are different topics under different environment. Software changes, a lot, over time. You can hardly recognize a software's source code if you don't touch them for a decade. The features changed, new features added, old features deprecated, etc. On the other hand, over the life time of a person, their DNA will not be changed dramatically. What their cells need to do is just an exactly copy of its genes. There won't be a case where one person needs to grow a third arm, while in software world, we constantly change requirements.

Software evolves more like the evolution of a species: Small changes over time to adapt the ever changing environment.

I think the segregation you were talking about might be attribute to the first generation of immigrants. NYC and many other places have a longer tradition of accepting people from other contries. Many "people in color" in those cities have been there for generations. But in SV, many tech engineers are not born and raised in America. They tend to hangout within their own group for obvious reasons. Compared with NYC, SV has just started to welcome people from other countries.

One senior, Sarah Jones, ... “There are not a lot of people of color in the Valley—and that, by itself, makes it kind of unwelcoming."

This statement may be true if "people of color" means African American. Otherwise, it is just not the fact. I do think, through my personal experience, the Valley is probably the most diverse place that I have been. I've seen people all over the wrold here: Asian, Latino, European, etc.

Have you ever been there? If you want to talk about science, then define "sick" fisrt. For most people, frequently coughing would be considered as "sick". Note that we are not discussing disease, we are talking about sickness, which I think is a less rigorous word sometimes referring to "not feeling good".

I was born in Beijing and have been living there for more than two decades. And yes, I feel bad when I was exposed under that environment: I can hardly breathe, I coughed a lot and felt itchy in every inch of my skin. If you think that is not "getting sick", then well, welcome to Beijing.

I think a more proper way of saying it, to me, is that "how the time is spent."

Spending 1 hour digging around the root cause of a failing driver is more interesting to a geek than spending 10 seconds closing windows.

Besides, if someone is experienced in a certain distro of a free OS, then it won't take too much time to setup his/her environment. I put most of my config files on Google Drive and it would just take me several minutes to setup my xmonad + vim environment.

Normally, when I see a directory named "src/" in a Go project's repo, it usually means the project is not quite idiomatic to Go.

To quote from Go's blog post [0]:

Sometimes people set GOPATH to the root of their source repository and put their packages in directories relative to the repository root, such as "src/my/package". On one hand, this keeps the import paths short ("my/package" instead of "github.com/me/project/my/package"), but on the other it breaks go get and forces users to re-set their GOPATH to use the package. Don't do this.

And this project is currently practicing the anti-pattern mentioned above.

0. http://blog.golang.org/organizing-go-code

Edit: format

Some background of the story:

CNNIC is a root CA from China. It issued a false certificate[0] and got revoked by both Google[1] and Mozilla[2].

CNNIC is also believed to behind some MITM attack against iCloud[3]. Pulling CNNIC from Firefox was once discussed five years ago on Mozilla's bugzilla[4, 5, 6].

0. https://cpj.org/blog/2015/03/chinas-cnnic-breaches-sacred-cr... 1. http://googleonlinesecurity.blogspot.com/2015/03/maintaining... 2. http://www.theregister.co.uk/2015/04/02/mozilla_revokes_cnni... 3. https://en.greatfire.org/blog/2014/oct/china-collecting-appl... 4. https://bugzilla.mozilla.org/show_bug.cgi?id=542689 5. https://bugzilla.mozilla.org/show_bug.cgi?id=476766 6. https://bugzilla.mozilla.org/show_bug.cgi?id=607208

Easy to implement?

This is just my theory: I think that GFW is currently entering its next stage, which probably includes MITM attack to TLS traffic and some attack specific to websites outside China. I suppose that since everything now is in a "research" stage, they are just trying to see if the technique works and how much it could go.

Disclaimer: I was an user inside China and being blocked from the real Internet. So please take my words with a grain of salt.

Probably, yes. But considering that CNNIC, a root CA from China, is issuing unauthorized certificates [0], I cannot help to connect these two events together. I won't be surprised that Chinese government is using unauthorized certificates to initiate MITM attack specifically targeting TLS traffics. If that is the case, there will be really bad days for the whole Internet.

0. http://googleonlinesecurity.blogspot.com/2015/03/maintaining...

For github, this is a smart move.

But, really, you can hardly negotiate with Chinese government. I'm pretty sure that they will deny this attack and re-emphasize their so-called Internet policy.

If I were github, instead of a warning message, I would redirect the workload to some Chinese government's website and let them suffer what they've created. Let's face it, they are waging a war on the Internet first.

Edit: Disclaimer: I know that my post is quite biased, especially this one. I'm not suggesting that people should wage a war to Chinese government. Please take my words just as a (biased?) sample from an ordinary Chinese citizen who is really tired of the government's censorship.

This is an article [0] summarizes what happened. It is however in Chinese. So let me put a simple summary here:

Baidu has Baidu Analytics, a service similar to Google Analytics. In short, a website includes a javascript file from Baidu and Baidu will report some basic analytics to the site manager like how many visitors per day, how much time they spent on average per page etc.

Someone in the middle between a client outside China and Baidu, allegedly it should be the Great Fire Wall, changed the javascript file from Baidu and added some code so that any client executing the javascript file will periodically access https://github.com/greatfire/ and https://github.com/cn-nytimes/. This means any user who is accessing a site using Baidu Analytics will be an attacker to github.

Here is a simple solution: Block any javascript from Baidu if you do not use it. For chrome users, add the pattern [*.]baidu.com. See here[1].

Edit 1: Added a solution.

Edit 2: Format.

Edit 3: Oh, it's not only Baidu Analytics. Baidu Ads' javascript is also being hijacked and changed [2]. Imagine that all sites containing Google Ads use their visitors as attackers to attack github. Now it is literally what is happening to Baidu and its customers (and their customers' visitors.) The javascript is only changed for visitors outside China. This is why people believe that is done by Chinese government --- the only entity who has total access to all out-going routers in China. Since many Chinese users use VPN or other types of proxy to access Internet, they are all considered as visitors outside China.

0. http://drops.wooyun.org/papers/5398

1. http://www.howtogeek.com/tips/how-to-block-javascript-and-ad...

2. http://www.solidot.org/story?sid=43489

I think many issues mentioned in this video could be (partly?) solved with better infrastructures. Just imagine how many infrastructures we have built for the auto cars: We built roads, traffic lights, stop signs, parking signs, we painted lanes, etc, etc. We've made a huge investment into the infrastructures simply for the cars to run safely and efficiently.

With self-driving cars, new infrastructures need to be built, not for human, but for different censors mounted on the car.

For cost consideration? Those poles are made of bamboos which is probably the most inexpensive materials in ancient China and it's easy to get. The shape of the poles is exactly the same as the raw materials. So people only need to cut the bamboo and that's it. No need to do any further work. Bamboos grow very fast and straight. This makes it have very low defective rate.

Imagine there was no plastic, no composite wood. You had to find a large piece of wood to do even a small design. Plus, if there was really a needs for alternatives, there was Chinese weelbarrow [0].

http://www.lowtechmagazine.com/2011/12/the-chinese-wheelbarr...

I don't know if shepherds are specifically prone to barking

Yes. Shepherds are especially prone to barking. They were trained to be, well, shepherds. This breed is used to guard sheep, not scare them. So they have to be quite and obedient to their owners.

Retrievers are also quite because they were used to retrieve game for a hunter. Those games may be just hurt and barking may scare them away. So the breeders were specifically select quite and obedient dogs to be retrievers.